Microsoft account unusual sign-in activity email, -----> Is this phishing?

Anonymous
2021-12-17T17:27:28+00:00

Is this legit?

If so, what should I look for and do?

Microsoft 365 and Office | Subscription, account, billing | Other | Windows

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

122 answers

Sort by: Most helpful
  1. Anonymous
    2022-03-14T00:34:00+00:00

    I'm getting same suspicious email, but I don't see a matching login under "Review recent activity" as Igor suggested below. So, I think someone is spoofing things and Microsoft needs to investigate. It seems to have an authentic Microsoft cert, but links from email look bogus. I'm reporting this as phishing via Outlook, but I'm sure it will just go into a deep, deep inbox. Here is what the email says:

    Microsoft account
    Unusual sign-in activity
    We detected something unusual about a recent sign-in to the Microsoft account {my account name}
    Sign-in details
    Country/region: Russia/Moscow
    IP address: 103.225.77.255
    Date: Sun, 13 Mar 2022 20:35:39 +0000
    Platform: Xiaomi Redmi K30 Ultra
    Browser: Brave Browser
    A user from Russia/Moscow just logged into your account from a new device, If this wasn't you, please report the user. If this was you, we'll trust similar activity in the future.

    Was this answer helpful?

    100+ people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2022-03-18T17:49:58+00:00

    I have been getting the same thing, located in my junk folder; with, the same information.

    I did a IP address location search of: 103.225.77.255

    That IP address is located in: New Delhi, India, Zip Code: 110019,

    Latitude & Longitude of City 28.54879 , 77.25399

    The IP address did not come from: "Russia, Moscow."
    My guess is that the rest of the perpetrator's information is bogus too.

    I did not respond to the "unusual sign-in activity;" as, I thought it might be a form of "click-bait;" however, I did change my password; after, spending quite sometime looking for how to do that.

    To date, I am still getting that same "unusual sign-in activity" message; however, since I've changed my password, I'm not too overly worried about it.
    I wish there was a way to respond to that criminal element with ransomware.

    My advice is: If there is ever an IP address included in the message; always, do a search of that IP address.
    Like, for example: "where is IP address: 103.225.77.255 located." And, be careful of click-bait.

    Hope this helps.

    Was this answer helpful?

    70+ people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2021-12-17T17:47:59+00:00

    Hi dBelcourt,

    Thank you for posting your concern here at the Microsoft Community Forum.

    We see that you received a notification that there was an unusual activity on your account. Yes, that email was from our system, and it is a legitimate Microsoft Account notification.

    For your account's safety and security, every Microsoft Account has a feature that can detect if your account is being accessed outside of your usual sign in location. If you do not recognize the sign in attempt, we highly recommend that you change your password immediately. This will protect your account from being hacked.

    In addition, we recommend that you consider adding an extra layer of security to your account. Here's how you can protect your Microsoft Account: How to help keep your Microsoft account safe and secure.

    If you use a VPN connection, the system will detect that and it will continue to notify you of the unusual activity. If this is the case, you'll need to add your device as trusted to make sure that you won't be locked out, and keep all your security information (phone number and alternate email address) updated.

    Let us know if you have additional queries.

    Was this answer helpful?

    30+ people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2022-03-17T05:39:11+00:00

    I just received this EXACT same email with the same location saying that my account was signed in from Russia/Moscow but the platform: Windows 10 and Browser: Firefox that is the only thing different with the email that was sent to me about and unusual sign in so I went to go change my password but had to update my phone number as well to get the code that was being sent as i dont have the old number that was on my account but now i cant do any of that for 30days. Doesnt that defect the whole purpose? how am i able to change my password?? or do i really have to wait for 30days? also if i report the user from that email is it going to lock me out of my email or what? i need me email for work and daily i cant go with out it so i dont want to be locked out but i also want to report the user. I find it really weird that multiple of us are having/getting the same email about unusual sign in activity and it beings from the same place/location Russia/Moscow. Does anyone know how i could get my password changed with out having to wait 30days for my new phone number to be updated? as well as does anyone know if i "report the user" from the email i was sent about the unusual sign in will i be locked out of my email account? This is really frustrating. I just want to secure my email account but now i cant for 30days because i updated my phone so i could change my pass word. If I really have to wait 30days to change my password then wont i just continue to have unusual sign in on my account because clearly someone in Russia have my password and login information. Please let me know if anyone has any ideas on what i can do? Thanks!

    Was this answer helpful?

    30+ people found this answer helpful.
    0 comments No comments
  5. Igor Leyko 112.2K Reputation points Independent Advisor
    2021-12-17T18:55:33+00:00

    Hi,

    My name is Igor, I have 12 Microsoft MVP awards. It's a pleasure for me to help others and I'll do all my best to help you. I'm sorry you have a problems.

    Please check what are the real links hidden under "Review recent activity" and "Click here".

    Open your account and check sign-ins at https://account.live.com/Activity

    Sorry, I'm not familiar with interface of your e-mail program.

    Was this answer helpful?

    20+ people found this answer helpful.
    0 comments No comments